Only email people who asked

The first rule is the simplest: only send to people who chose to hear from you. There are two ways to collect that choice.

• Single opt-in: someone types in their email and is added right away.
• Double opt-in: someone types in their email, then has to click a confirmation link before they are actually subscribed. Until they click, the only thing they receive is that one “please confirm” email.

Use double opt-in. It proves the person really wanted in, it keeps mistyped and fake addresses off your list, and it is the strongest signal to providers like Gmail that your list is clean. The only cost is one extra click for your subscriber, and it is worth it.

Every email has to let people leave

This is both the law and basic decency. Every newsletter needs two things:

• A visible “unsubscribe” link, usually in the footer. It has to keep working, and you have to honor opt-outs quickly. The law allows up to ten business days; just do it right away.
• A one-click unsubscribe button. This is the “Unsubscribe” link that Gmail and others show at the very top of an email. Good email software adds it automatically. Gmail and Yahoo now expect it, so make sure it is turned on.

The one exception is the confirmation email from double opt-in. It has no unsubscribe link, because the person has not subscribed to anything yet.

Say who you are, and where

US law requires a real physical mailing address in every promotional email. A PO box or your registered business address is perfectly fine. Put it in the footer. While you are at it, use an honest “from” name and a subject line that matches what is inside. Never disguise who an email is from. People can tell, and so can spam filters.

The two kinds of “tracking” (only one is the creepy kind)

Here is where most of the confusion lives. The word “tracking” gets used for two completely different things.

Engagement tracking tells you which individual person opened your email or clicked a link. It works with a tiny invisible image, often called a tracking pixel, and by quietly rewriting your links to pass through your own server first. This is how marketers build profiles of people. It is optional, and no law requires it.

Delivery signals are just the mail system reporting back what happened to a message:

• Bounces, meaning the address is dead or refused the mail.
• Complaints, meaning someone marked it as spam.
• Unsubscribes, meaning someone opted out.

These need no pixel and no link rewriting. They are a normal part of sending email, and they do not profile anyone. The important point: a healthy, legal, clean list runs almost entirely on these delivery signals, with zero engagement tracking.

Keeping your list clean

A clean list protects your reputation, which is what decides whether you reach the inbox at all. Here is what each kind of cleanup actually needs.

• Removing dead addresses (hard bounces): no tracking. Comes from bounce data.
• Removing people who marked you as spam: no tracking. Comes from complaint data.
• Honoring unsubscribes: no tracking. Handled for you.
• Dropping people who never open anything (a “sunset” policy): this is the one cleanup that needs engagement tracking, and specifically the per-person kind. Anonymous totals cannot do it, because they do not know whose address to remove.

So the cleanup that matters most, and everything the law asks of you, needs no tracking at all. Only that last optional step does.

Will it even reach the inbox?

Sending an email is not the same as it landing where people will see it. Three things decide that.

• Authentication. Three behind-the-scenes records prove the mail really came from you: SPF (which servers may send for your domain), DKIM (a signature on each message), and DMARC (what to do if those checks fail). Without them you go straight to spam. With them you are eligible for the inbox, not guaranteed.
• Reputation. Providers slowly learn whether people want your mail. A brand-new sending domain has no reputation yet, so the first emails often land in spam or in Gmail’s Promotions tab. This is earned over time, not flipped on with a setting. A perfect technical score on a testing site measures your setup, not your reputation.
• Engagement. Replies, “not spam,” dragging your email to the main inbox, adding you to contacts. These tell providers you are wanted, and they are the fastest way to graduate into the inbox. This is exactly why asking new subscribers to reply is so useful.

Two things worth knowing: the Promotions tab is not spam, it is just a category, and your mail is delivered there. And the more designed and “marketing-like” an email looks, the more likely it lands in Promotions instead of the main inbox. A plainer, more personal email from a real person tends to land better.

The privacy choices that are yours to make

You get to decide how much you measure.

• No tracking. No pixel, no click tracking. You still get bounces, complaints, and unsubscribes, so you can keep your list clean. You give up knowing your open rate. This is the right choice when “we do not track you” is part of your promise.
• Aggregate only. Anonymous totals, like “sixty percent opened this,” with nothing tied to a specific person. You learn what resonates without profiling anyone.
• Individual. Per-person open and click history. The most insight, and it lets you sunset people who never engage, but it is the surveillance kind.

Whatever you choose beyond “no tracking,” say so plainly in your privacy policy. The honest move is to choose on purpose and tell people what you do.

The rules, in plain terms

• In the US (CAN-SPAM): accurate “from” and subject, a working unsubscribe you honor promptly, and a physical mailing address. No tracking required.
• For EU or Canadian subscribers (GDPR, CASL): get clear consent, which double opt-in covers well, let people see or delete what you hold, and disclose what you collect.
• Gmail and Yahoo’s sender rules: authenticate your mail, offer one-click unsubscribe, and keep spam complaints very low. Aimed at big senders, but good practice for everyone.

A quick checklist before you hit send

• People opted in, ideally with double opt-in.
• A visible unsubscribe link and a one-click unsubscribe button.
• Your physical mailing address in the footer.
• An honest “from” name and subject.
• SPF, DKIM, and DMARC set up and passing.
• A way to remove bounces, complaints, and opt-outs (no tracking needed).
• A privacy policy that matches what you actually do, especially any tracking.
• Sending consistently, to people who want it, while your reputation builds.

None of this requires you to become a deliverability expert. It requires you to get consent, make leaving easy, be honest about who you are and what you measure, and keep your list clean. Do those, and you are ahead of most of the email that lands in your own inbox.